Browse › Advanced Web Application Exploitation

Web 201 - Lab 2.4: NoSQL Injection
Part of Advanced Web Application Exploitation Topic: Web Hacking
Access
Included in StationX Membership — unlimited attempts
🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this lab, we will explore a few aspects of NoSQL injections.
- We will be using a Node.js application as an example, with a MongoDB backend.
- ⏱ About 60 minutes
- Counts towards: CompTIA PenTest+ (exam PT0-003) · OffSec Certified Professional (exam OSCP)
Scored lab. A scored lab checks your work and records a score you can see on the lab page.
Roadmaps that use this lab
- CompTIA PenTest+ (PT0-003) — step 4: Web application testing
- OffSec Certified Professional (OSCP) — step 4: Web attack chains
- Penetration Tester — career path — step 4: Web application attacks
- Penetration Tester — career path — step 7: Certify it
- AI Security Engineer — career path — step 4: Attack AI like a red teamer





